• English
    X

    Google Translate Disclaimer

    The Maryland Department of Information Technology (“DoIT”) offers translations of the content through Google Translate. Because Google Translate is an external website, DoIT does not control the quality or accuracy of translated content. All DoIT content is filtered through Google Translate which may result in unexpected and unpredictable degradation of portions of text, images and the general appearance on translated pages. Google Translate may maintain unique privacy and use policies. These policies are not controlled by DoIT and are not associated with DoIT’s privacy and use policies. After selecting a translation option, users will be notified that they are leaving DoIT’s website. Users should consult the original English content on DoIT’s website if there are any questions about the translated content.

    DoIT uses Google Translate to provide language translations of its content. Google Translate is a free, automated service that relies on data and technology to provide its translations. The Google Translate feature is provided for informational purposes only. Translations cannot be guaranteed as exact or without the inclusion of incorrect or inappropriate language. Google Translate is a third-party service and site users will be leaving DoIT to utilize translated content. As such, DoIT does not guarantee and does not accept responsibility for, the accuracy, reliability, or performance of this service nor the limitations provided by this service, such as the inability to translate specific files like PDFs and graphics (e.g. .jpgs, .gifs, etc.).

    DoIT provides Google Translate as an online tool for its users, but DoIT does not directly endorse the website or imply that it is the only solution available to users. All site visitors may choose to use alternate tools for their translation needs. Any individuals or parties that use DoIT content in translated form, whether by Google Translate or by any other translation services, do so at their own risk. DoIT is not liable for any loss or damages arising out of, or issues related to, the use of or reliance on translated content. DoIT assumes no liability for any site visitor’s activities in connection with use of the Google Translate functionality or content.

    The Google Translate service is a means by which DoIT offers translations of content and is meant solely for the convenience of non-English speaking users of the website. The translated content is provided directly and dynamically by Google; DoIT has no direct control over the translated content as it appears using this tool. Therefore, in all contexts, the English content, as directly provided by DoIT is to be held authoritative.

    Local Health Department Billing Manual

    ​​Compliance

    Back to Main Page

    Overview

    Risk mitigation starts with understanding compliance guidelines. 


    Document TitleDateExpirationSource
    General Information
    Availity Lifeline: Self-Service Resources for Providers, Health Plans, and Trading Partners
    No date​No date​​Availity
    Cyberattack on Change Healthcare
    Mar-2024​
    ​No date
    ​U.S Department of Health and Human Services​
    Use of Online Tracking Technologies by HIPAA Covered Entities and Business Associates

    ​Mar-2024
    ​No date
    ​U.S. Department of Health and Human Services
    OCR Opens HIPAA Compliance Investigation of Change Healthcare

    Mar-2024​​No date
    ​The HIPPA Journal
    HHS Statement Regarding the Cyberattack on Change Healthcare

    ​Mar-2024
    ​No date
    ​U.S. Department of HHS
    ​The Cyberattack on Change Healthcare Health Center FAQs

    ​Mar-2024
    ​No date
    ​National Association of Community Health Centers
    Healthcare Cybersecurity standards tied to federal aid under new bill

    ​Mar-2024
    ​No date
    ​Modern Healthcare
    UnitedHealth Group Confirms Data Stolen in Change Healthcare Ransomware Attack

    Mar-2024​
    No date​​The HIPPA Journal

    Skynet May not yet be a threat but complacency is

    ​Mar-2024

    No date​

    ​RKW Law Group
    CMS Restricting Access to Healthcare Datasets Will Cause Long Term Damage to Public Health

    ​Mar-2024
    ​No date
    ​The HIPPA Journal
    ​​Ransomware Attack on Maryland Psychotherapy Provider Results in HIPAA Penalty
    Feb-2022​​No date
    ​The HIPPA Journal
    Proactive Cyber Exposure Management: A Comprehensive Guide
    ​Jan-2023
    No date​​MRCS

    Information Blocking Toolkit


    Sep-2023​

    No date​

    MGMA
    Medical Mutual Self-Assessment Form
    ​No date
    No date​
    OIG FY2023 Work Plan Sep-2022 No Date
    HHS Proposes New Protection to Increase Care Coordination and Confidentiality for Patients with Substance Use Challenge Nov-2022 No Date HHS
    PDMP Use Mandate Frequently Asked Questions Jan-2023 No date MDH
    12 Most Common Medical Practice Technology Security Mistakes No date No date
    CMS Public Health Service Act Provider and Facility Requirements Presentation No date No date CMS
    Compliance Resource Medicare Mar-2021​ No date CMS
    Fraud Abuse Medicare Products No date No date MDH
    Guidance on Request for Exceptions from Standards to Permit Testing of Proposed Modifications No date No date
    Information Blocking New Applicability Dates Included in ONC Interim Final Rule​​ Jun-2020 No date
    MD Insurance Request for Confidentiality 2017 Jun-2017 No date
    MDH Corporate Compliance Program and Addendum Oct-2019 No date MDH
    MDH Corporate Compliance Program and Addendum Jan-2012 No date
    Minor Consent Laws - MD 2012​ No date No date Medical Association
    PDMP Use Mandate Prescriber Fact Sheet May 2018 Jun-2018 No date MDH
    OIG Provider Compliance Program Guidance No date No date
    Kaiser Compliance and Regulatory Policy 
    No date​No date​​Kaiser
    MD Insurance Commissioner Provider Issues
    ​No date
    No date​​Maryland Insurance  Administration
    Compliance Program Guidance
    Apr-2023​No date​​Office of Inspector General
    Federal Register OIC Compliance Program
    ​Oct-2023
    ​No date
    ​Office of Inspector General

    Jun-2023​

    ​No date

    The HIPAA Journal
    ​Jun-2023
    ​No date
    ​Medical Revenue Cycle Specialists


    Jan-2022

    No date

    Oncology Practice Management​


    Apr-2022​

    No date​

    ​Office of Inspector General
    Limitation on Recoupment of Overpayments
    Sep-2023​No date​​Billing & Coding

    No date

    No date​

    CMS


    Sep-2023

    No date​



    Oct-2023

    No date​

    Billing & Coding
    HHS Publishes proposed rule establishing information blocking disincentives for healthcare providers

    Oct-2023​​No date
    ​The HIPPA Journal

    AHA Files Lawsuite challenging HHS guidance on tracking technologies

    Nov-2023

    ​No date

    The HIPPA Journal​
    Cyber Security Action Team Q3 2023 Threat Horizons Report
    ​Nov-2023
    No date​​Google Cloud Threat Horizons
    ​​CMS
    Medical Record Maintenance & Access Requirements
    ​May 2023
    No date​​Medicare Learning Network
    Request for Records Disposition Authority
    ​Jul-2017
    ​No date
    ​National Archives & Records Administration-CMS: Medicare &Medicaid Financial Records Retention
    Compliance Review Program No date No date
    2021 Compliance Review Program Findings May-2022 No date
    Payment Error Rate Measurement Program
    ​No date
    No date​
    Medicare Claim Review Programs
    Sep-2016​No date​​CMS​


    ​May-2023

    ​No date

    ​MGMA
    Medicare Fee-for-Service Compliance Programs | CMS
    ​Sep-2023
    No date​​CMS

    CMS MLN4824456 – Medicare Provider Compliance Tips (cms.gov)

    ​No date

    No date​

    ​CMS

    HIPAA
    GAO: FDA Should Update Medical Device Cybersecurity Agreement
    ​Dec-2023​No date​​The HIPPA Journal
    CitrixBleed Vulnerability Requires Urgent Action as Ransomware Groups Scale Up Attacks
    Dec-2023​​No date
    ​HIPPA Journal​
    HHS Office for Civil Rights Issues Bullentin on Requirements on HIPAA for online tracking Technologies to Protect the Privacy and Security of Health Information Dec-2022 No date HHS
    HIPAA Employee Access Tracking Guide 2016 No date MDH
    HIPAA Tracking Employee Access 2021 No date RSF
    Patient Confidentiality Challenges Infographic No date No date
    HIPAA and Telehealth
    No date​​No date
    ​Telehealth Technology.org

    ​Jul-2022

    No date​

    XTelligent IT Security


    ​Aug-2023

    No date​

    JD Supra


    ​Apr-2023

    Aug-2023

    CMS


    Aug-2023​

    No date

    The HIPPA Journal


    ​Jul-2023

    No date​

    ​Office for Civil Rights-DHHS



    No date

    No date​

    ​HHS


    Feb-2023​

    ​No date

    CMS
    No Surprises Act
    No Surprises Act
    ​Dec-2023
    ​No date
    ​CMS
    FAQ for Providers About the No Surprises Rules

    Apr-2022​No date​​CMS
    IMPLEMENTING THE NO SURPRISES ACT
    Sep-2023​No date​​MGMA
    Implementing the No Surprises Act in Family Planning Settings
    Nov-2022​​No date
    ​National Family Planning & Reproductive Health Association
    No Surprises Act Toolkit​
    ​Jan-2022​ No date​​​AMA​
    No Surprise Billing Rules: Co-Provider Requirements Begin in 2023 Nov-2022 No date
    No Surprise Act Good Faith Estimate Template CMS No date​ No date
    Standard Notice and Consent Surprise Billing Protection Forms for Nonparticipating Providers​ Jan-2022 Mar-2022
    The No Surprise Act​Jan-2022No date


    Apr-2023

    No date



    Dec-2022

    ​No date



    May-2023

    No date​

    ​MGMA
    ​​Stark Law / Anti Kickback Statute

    Temporary Stark Law waivers during COVID-19

    ​Dec-2020
    No date​​AMA
    ​COVID-19 Blanket Waivers Section 1877​
    Mar-2020​No date​​AMA
    ​​Billing & Coding
    Optum Compliance_Issues_PHP_IOP_2.7.24.pdf (optum.com)
    ​Feb-2024
    ​No date
    ​Optum
    Compliance_Issues_PHP_IOP_2.7.24.pdf (optum.com)​​
    ​Feb-2024
    No date
    ​Payer

    ​​

    ​​

    ​​